Security Incidents mailing list archives
eri?
From: fletcher () CS UTEXAS EDU (Fletcher Mattox)
Date: Fri, 28 Jan 2000 05:46:15 -0600
While doing a postmortem analysis of a compromised non-root account on a linux machine, we found a program named "eri" in the accounting logs. It appeared immediately after gcc was run, so I assume it was a compiled program. Of course, "eri" could have been named at the cracker's whim, but I am wondering if it is a known cracking tool. Has anyone ever heard of it? Thanks Fletcher
Current thread:
- Extrange named messages king (Jan 27)
- Re: Extrange named messages Massimo Ferrario (Jan 28)
- Re: Extrange named messages Rob Quinn (Jan 31)
- eri? Fletcher Mattox (Jan 28)
- Re: eri? Bill Gilpatric (Jan 28)
- Re: Extrange named messages Massimo Ferrario (Jan 28)